Re: shepherd service, unexplained permission errors

[Attila Lendvai]

thank you Felix!

the broken expectation from me was that users "have" a group and 
supplementar-groups (as suggested by the (user-account #:group ...) 
constructor), and if i specify the user to fork+exec-command, then it sets 
"its" group, too (i tried with and without specifying a #:group).

in retrospect it should have been obvious, because the fork+exec-command API is 
on the abstraction level of linux, not that of guix.

the solution that works now is essentially:

(fork+exec-command
  cmd
  #:user "zigbee2mqtt"
  #:group '#$(user-account-group *zigbee2mqtt-user*)
  #:supplementary-groups
  '#$(user-account-supplementary-groups *zigbee2mqtt-user*))

thanks again,

-- 
• attila lendvai
• PGP: 963F 5D5F 45C7 DFCD 0A39
--
“Enlightenment is man's leaving his self-caused immaturity. Immaturity is the 
incapacity to use one's intelligence without the guidance of another.”
        — Immanuel Kant (1724–1804)